Unknown Woocommerce Affiliate Plugin – Coupon Affiliates vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Woocommerce Affiliate Plugin – Coupon Affiliates, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2022-0818unknownwoocommerce affiliate plugin – coupon affiliates+2
EPSS score
0.87%
The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.